Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
File:                     tKIIXH3jtZgha4n7Dysdkw3mbBk.mft (raw, json)
Hash identifier:          AYODkKg2JqwciRf/NCw2T8xvVv67BnWit9LuVlj8ssU=
Subject key identifier:   6D:1E:ED:D2:53:95:0D:B8:04:A4:32:7F:EE:A5:A9:45:97:FC:34:DB
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Certificate issuer:       /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial:       018F89DB6348202CA276F04E38E52323D59F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
Manifest number:          1145
Signing time:             Sat 18 May 2024 04:00:07 +0000
Manifest this update:     Sat 18 May 2024 04:00:07 +0000
Manifest next update:     Sun 19 May 2024 04:00:07 +0000
Files and hashes:         1: Maw9MkzZIAqBNmLsDH-Qo6m-D00.roa (hash: fNB2ftojaYzfIp3Qt52S6pQX2rHXWGPz9U0P2jZsMJk=)
                          2: tKIIXH3jtZgha4n7Dysdkw3mbBk.crl (hash: cPJjfTsn8Zc5MLRNkNcUQNwlvxUseU+BNS3PNRSUI90=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:db:63:48:20:2c:a2:76:f0:4e:38:e5:23:23:d5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
        Validity
            Not Before: May 18 04:00:07 2024 GMT
            Not After : May 19 04:00:07 2024 GMT
        Subject: CN=6d1eedd253950db804a4327feea5a94597fc34db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:aa:75:e9:63:d5:5a:7f:e4:61:30:8a:a1:6d:
                    f7:7a:93:fb:04:31:50:d7:38:0f:82:b5:7c:5b:0d:
                    01:53:75:f9:51:ff:af:94:c5:d4:15:7a:fa:eb:09:
                    d5:57:9f:e7:01:77:0b:d7:56:23:cf:2e:48:46:ba:
                    2c:98:53:ac:a4:08:66:3e:f6:b2:46:62:95:19:4f:
                    68:e1:08:9c:61:f1:6e:5c:c8:76:e0:77:e1:ce:c4:
                    7d:bd:d9:53:d0:95:d7:14:3e:b8:75:64:64:35:52:
                    06:fc:17:ea:31:78:79:e7:1a:44:1f:9b:b6:e2:dc:
                    4a:b0:b3:d7:31:01:27:39:35:b8:64:aa:24:9a:50:
                    ba:9e:62:53:90:6a:db:f9:e3:90:fc:a1:2b:6b:a1:
                    be:9e:08:ff:26:9f:00:07:26:24:52:6c:90:15:52:
                    9a:a7:f1:08:52:65:a7:bd:c8:4c:91:b9:71:ba:71:
                    b6:19:89:a1:01:10:fc:f3:a8:af:7f:45:1e:2c:70:
                    2b:28:4b:69:5c:88:38:51:a7:94:f9:33:27:d8:b5:
                    a2:18:b3:8c:dd:f6:c2:51:e4:67:50:7c:2e:db:55:
                    36:0e:fd:bd:16:20:fc:bd:a7:7d:5f:46:1c:31:82:
                    46:f3:8b:fc:19:9f:13:4d:08:e1:1d:3b:85:a8:fe:
                    81:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1E:ED:D2:53:95:0D:B8:04:A4:32:7F:EE:A5:A9:45:97:FC:34:DB
            X509v3 Authority Key Identifier:
                keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:e4:34:67:40:2f:bc:1a:91:6c:2a:79:e5:83:57:e4:f8:7d:
         91:d4:44:ee:a4:80:7f:3b:4f:20:3a:45:79:4d:2f:eb:ab:3d:
         66:2b:36:9d:9a:f8:2d:af:31:f2:36:43:29:25:60:80:3c:68:
         ba:0a:73:0a:0c:19:b2:98:0a:87:27:38:31:16:9b:16:af:3f:
         cd:81:e2:df:95:07:1b:f2:a8:1a:d1:13:c4:31:ee:52:63:dd:
         87:ee:ee:71:bb:85:f3:da:16:a9:01:80:53:c5:82:f0:f7:94:
         0a:8f:79:db:af:6a:60:ce:c2:1b:08:1c:09:e2:7e:15:f9:c9:
         0d:25:1d:ab:1b:cd:59:e3:1b:0f:8e:01:c7:47:11:18:6c:d3:
         5a:b1:98:ab:e2:e0:6d:d7:1d:e7:0b:8e:d6:41:a8:f9:50:df:
         dc:9b:23:74:f8:7f:e9:40:db:ba:b1:a1:5a:3f:38:5a:03:ee:
         89:4a:7d:ed:e5:f8:c0:16:4e:ab:07:cb:cf:51:e0:46:33:5f:
         e4:28:dc:53:1a:11:08:ad:78:b5:9e:e0:a8:14:d0:b8:da:44:
         8e:52:42:ba:f6:27:a4:d1:29:de:7b:df:8f:7f:14:56:4b:31:
         99:fd:ef:8c:0b:2f:f4:83:1a:e2:70:be:b0:a4:7b:b8:d0:4b:
         60:fd:1d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:16:34 2024 by rpki-client on console-fra.rpki-client.org